Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa
File: a39c4916-d280-3db9-8d45-5b63bb04856b.roa (raw, json)
Hash identifier: EEv7qM1kwvwVKKj9hoiToEVQ0NG1fwubRcjtWywkRUk=
Subject key identifier: D4:9C:DE:AD:0D:BB:F1:34:7C:D4:52:21:95:F5:01:B4:7D:B6:20:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D8D86C72B34AC282EFE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.89.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d8:d8:6c:72:b3:4a:c2:82:ef:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=20a7f436-1ab9-4d1d-aa51-c3691deab283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:66:af:f5:1c:4f:54:99:cf:a7:0d:fb:1e:
51:77:f1:02:6b:b1:23:b2:a0:bd:5c:21:a3:b2:b7:
97:f9:54:f0:0d:74:88:15:5e:8a:ae:c2:0e:50:b6:
79:b7:04:84:ae:09:c0:49:f3:51:bb:f6:f9:bb:36:
e4:e2:1b:cf:eb:eb:74:26:07:a3:b8:6f:fd:76:cc:
b5:b5:eb:4e:66:ce:f7:7f:15:68:d6:31:ab:be:1a:
a6:9e:65:64:c9:9e:19:90:fa:dc:e8:5a:ec:2e:c5:
95:55:06:42:b3:6b:08:7c:67:e8:a9:1d:7f:0e:c2:
b5:a1:4a:4a:97:8c:23:83:d2:d0:e6:85:8a:a4:14:
e5:f5:95:1e:54:9c:8d:5a:4a:ce:bf:6e:a1:fd:f3:
7b:02:ad:e7:02:4d:2f:a1:a8:78:85:ea:12:e2:9f:
78:f5:7e:35:13:b4:d9:a2:8a:b3:c5:92:84:fa:a3:
fb:c5:d6:4a:25:16:30:a2:c5:43:a0:f4:d8:19:47:
ee:20:f0:b5:8e:59:c3:0c:f0:78:39:7a:b6:42:54:
6c:48:d0:fc:f8:d0:a4:02:bb:d2:2c:a3:51:3b:54:
c3:eb:e1:82:32:05:46:1d:c4:67:90:7a:c7:02:b0:
b2:1e:e2:cf:96:a6:ca:28:5f:2d:12:07:a5:d4:f6:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:DE:AD:0D:BB:F1:34:7C:D4:52:21:95:F5:01:B4:7D:B6:20:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:4b:93:a3:44:7f:a5:62:3d:9e:44:96:7f:7a:1c:b0:57:2d:
87:91:ff:2a:c1:37:1b:89:39:36:c5:0a:0a:1b:ba:52:4e:02:
4b:69:f1:3a:4a:e0:62:a5:13:67:d6:c4:3e:e9:8b:c3:94:41:
f2:02:d9:f9:e1:6e:fd:76:5c:17:ee:c6:ea:1c:ee:d7:23:ab:
0d:5a:ac:09:29:d4:87:c2:7d:54:ac:3c:07:56:ae:7c:88:18:
14:f4:98:95:b3:68:4d:98:c6:dc:63:85:e3:82:4f:19:ca:3e:
0f:36:81:78:05:02:76:bf:d1:14:a5:09:89:78:db:7c:90:4b:
0d:e1:04:a6:db:83:98:6c:67:f8:6a:3f:7a:81:fe:4f:07:c6:
bf:a9:28:89:05:45:83:4d:f4:4d:0f:bf:d9:2a:2d:ad:5b:cc:
2d:2a:3d:ad:0d:b8:e9:9a:0f:89:4a:d9:de:26:d5:17:bf:24:
3a:72:3f:a6:06:87:ab:53:cf:af:5f:42:46:15:00:9a:d0:af:
6a:2a:98:72:5a:3b:c9:dd:3c:a9:f9:0a:4f:e6:40:b7:56:da:
f4:10:3e:13:51:e2:35:33:8a:93:30:02:8b:fe:38:7e:4f:5a:
a1:df:f7:71:ab:f9:3f:d0:09:63:50:0e:6a:69:ff:f8:12:5a:
cf:a7:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:25 2025 by rpki-client